Re: Validating a DNSSEC installation

2009-06-16 Thread Erik Lotspeich
12 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4 Is this expected or do I need to fine-tune my configuration further? Thanks, Erik. Chris Buxton wrote: > On Jun 13, 2009, at 4:59 AM, Erik Lotspeich wrote: >> Is it normal that a validating resolver can't valid

Re: Validating a DNSSEC installation

2009-06-13 Thread Erik Lotspeich
a rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1 [snip] I don't get the AD flag here. Thanks again, Erik. Hauke Lampe wrote: > Erik Lotspeich wrote: > >> I have registered with the ISC's DLV registry. I am >> having trouble finding the best way for me to

Validating a DNSSEC installation

2009-06-11 Thread Erik Lotspeich
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, Although I'm not new to DNS, I'm new to DNSSEC. I have read documentation and howtos regarding DNSSEC. I believe that I have it configured and working for my domain, lotspeich.org. I have registered with the ISC's DLV registry. I am having tro